SMSF Core
§ Security

How your fund's data is handled.

  • Australian data residency

    Fund records are stored with Supabase in the Sydney region, so the database holding your fund data sits in Australia. Application servers and the document-text extraction step run outside Australia; the security page sets out exactly which step runs where.

  • Row-level isolation

    Row-level security policies isolate each fund's data at the database layer, so one fund's records are never readable from another fund's session.

  • Encrypted in transit

    All traffic between your browser and the product is encrypted (HTTPS/TLS).

  • Daily backups

    The database is backed up daily.

  • No ad tracking

    Analytics run on Plausible: privacy-first, cookie-free, and never shared with ad networks.

Continuity

Records are portable by design. BGL SF360, Class and CSV exports are free on any plan, during the trial, and after any subscription ends. If a subscription lapses, the account drops to read-only rather than disappearing. No data lock-in, ever.

The Privacy Act small-business exemption was removed effective 1 July 2026. We treat trustee data as personal information under the Australian Privacy Principles. We do not claim certifications we do not hold.

General information only. Not a licensed financial service.

Start free: 30 days, no card